Noptin – Newsletter, New Post Notifications & Email Automation

Noptin – Newsletter, New Post Notifications & Email Automation has 6 disclosed vulnerabilities in the WordSec catalog, reported between 2022 and 2026; all 6 are fixed as of October 2026. Their average CVSS score is 5.6, and the most serious one scores 7.2 out of 10. Severity breakdown: 0 critical and 1 high. 2026 was the busiest year with 2 disclosures.

The most common weakness is Cross-Site Scripting, behind 2 of the records (33%). Other recurring categories include Missing Authorization, Improper Neutralization Of Formula Elements In A CSV File.

Every one of the 6 issues recorded for Noptin – Newsletter, New Post Notifications & Email Automation has a vendor fix available, so running the current release closes all known holes.

6 independent researchers contributed these findings, one record each. Noptin – Newsletter, New Post Notifications & Email Automation is installed on roughly 10,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.1.3.

Strategic Overview

Avg CVSSMedium
5.6/ 10
Patch Coverage100%
Open

0

Fixed

6

Get automatic notifications for all Noptin – Newsletter, New Post Notifications & Email Automation vulnerabilities before they are exploited.

Highest severity on recordCVSS 7.2CVE-2022-46803

Simple Newsletter Plugin – Noptin <= 1.10.3 - Unauthenticated CSV Injection

Read the full analysis

Vulnerability Records

6 records
Noptin – Newsletter, New Post Notifications & Email Automation banner
Latestv4.4.3

Noptin – Newsletter, New Post Notifications & Email Automation

Noptin Newsletter Team

Author

Noptin Newsletter Team

4.5(120)
90/100
Last Updated
2026-10-28 (6h ago)
Active Installs
10,000+
Downloads
721,450
Requires WP
6.7+
Requires PHP
7.4+
Tested up to
WP 7.1.3
Created
2019-03-06 (8y ago)

Noptin is a free WordPress newsletter and email marketing plugin for collecting subscribers, sending newsletters, and automating emails. ★★★★★ Create newsletter subscription forms, manage unlimited email subscribers, send automatic new post notifications, and schedule post digests. You can also email registered WordPress users and WooCommerce customers from your WordPress dashboard. Noptin stores your subscriber list on your WordPress site. Use it as a self-hosted newsletter solution, send through WordPress’s configured email transport, or connect external marketing services with optional add-ons. Noptin is designed to be lightweight and privacy-conscious, and supports WordPress multisite. Send Automatic New Post Notifications Automatically email subscribers when a new WordPress post is published. Noptin’s new post notifications help bloggers, publishers, and membership sites bring readers back whenever new content is available. Send new post notification emails to newsletter subscribers, WordPress users, or WooCommerce customers. Customize the notification and use categories, tags, custom fields, or automation rules to target relevant content and recipients. Notify readers about newly published content without manually creating a newsletter for each post. WordPress Post Digests and Latest Posts Newsletters Want to send one newsletter containing several recent posts rather than a separate email for each publication? Create post digest emails that automatically share your latest WordPress posts on a daily, weekly, monthly, or yearly schedule. These scheduled latest-posts emails work well for news roundups, blog digests, new products, and ongoing reader engagement. Email WordPress Users and WooCommerce Customers Noptin can email registered WordPress users directly, as well as your newsletter subscribers. Send newsletters to WordPress users, welcome emails to new users, and notifications about newly published posts. Newsletter subscribers and registered users are distinct recipient groups; choose the appropriate audience and respect email preferences and consent. With WooCommerce, you can email your customers, send welcome messages to new customers, notify customers about new products, and build customer email automations. Available workflows include abandoned-cart messages, thank-you emails, and next-order coupon code emails; some require optional add-ons. Send WordPress Newsletters and Automate Email Marketing Create and send email newsletters from WordPress, including newsletters to subscribers, scheduled campaigns, welcome emails, and recurring messages. Build emails with Noptin’s visual drag-and-drop editor, the classic editor, or plain text and raw html textarea editors. Use email marketing automation to respond to WordPress activity instead of sending every message manually. Noptin supports automation rules, triggers and actions for subscribers, users, and integrated plugins. Workflows can include welcome emails, WooCommerce events, and notifications through SMS, Slack, or Telegram when the applicable integrations are enabled. Collect Unlimited Newsletter Subscribers Create email opt-in forms and grow your newsletter list without a per-subscriber limit in Noptin: Build newsletter subscription forms, including blocks, shortcodes, popups, and widgets. Manage subscribers in WordPress and segment them using tags and custom fields. Import existing email subscribers when switching from another newsletter plugin or service. Offer content upgrades or lead magnets using your email subscription forms. Newsletter Signup Checkboxes for WordPress Forms Let visitors subscribe to your newsletter while using your existing forms: WordPress registration, comment forms, WooCommerce checkout, and Easy Digital Downloads checkout. Contact Form 7, WPForms, Gravity Forms, Ninja Forms, and Elementor Forms. For example, add a newsletter opt-in checkbox to a Contact Form 7 form so visitors can subscribe when they submit the form. WordPress and WooCommerce Integrations Noptin integrates with the following WordPress tools, with some connections or actions available through optional add-ons: Advertising: Advanced Ads. Community: bbPress, FluentCommunity. Custom Fields: Advanced Custom Fields, Meta Box, Pods, Toolset Types. Customer Support: Fluent Support. Directories: Directorist, GeoDirectory. eCommerce: Charitable, Easy Digital Downloads, Hizzle Pay, WooCommerce. Events: Events Manager, Modern Events Calendar, The Events Calendar. Forms: Beaver Builder, Bit Form, Bricks Builder, Brizy, Contact Form 7, Convert Pro, Divi Builder, Elementor, Everest Forms, Fluent Forms, Formidable Forms, Forminator, Gravity Forms, Happyforms, JetFormBuilder, MetForm, Ninja Forms, QuillForms, weForms, WPForms, WS Form. Jobs: WP Job Manager, WP Job Openings. Learning Management: LearnDash, LearnPress, LifterLMS, Masteriyo LMS, MasterStudy LMS, Sensei LMS, Tutor LMS. Membership: MemberPress, Paid Memberships Pro, ProfilePress, Simple Membership, SureMembers, Ultimate Member, WishList Member, WP eMember. Polls: WP-Polls. Recipes: WP Recipe Maker. Rewards: GamiPress, myCRED, WPLoyalty. Security: Akismet. Social Media: Bit Social. Translation: Polylang, WPML. WordPress: WordPress Comments, WordPress Registration Form, WordPress Users. External Email Marketing Services and Automations Use Noptin as a standalone WordPress newsletter plugin or connect external platforms through optional integrations. You can sync contacts or automate activities between WordPress and supported services. Email services: ActiveCampaign, Activetrail, Agile CRM, Attio, AWeber, Birdsend, Brevo (Sendinblue), Campaign Monitor, Constant Contact, ConvertKit, Customerly, Drip, Emailit, EmailOctopus, GetResponse, Gist, HubSpot, iContact, Keap/Infusionsoft, Klaviyo, Mailchimp, MailerLite, MailerLite (Classic), Mailjet, Moosend, Ontraport, Ortto, Pipedrive, Quentn, Salesflare, Salesforce, SendFox, Sendgrid, Sendlane, SendPulse, Sendy, Smaily, VerticalResponse, Zoho Campaigns, Zoho CRM. Non-email services: Google Sheets, Postal, Slack, Telegram, Twilio, Webhooks, WhatsApp. Privacy, Performance, and Email Delivery Noptin is designed to be lightweight and keeps its local subscriber database inside WordPress. You remain responsible for your website’s privacy disclosures, consent practices, and email marketing compliance. Noptin sends email through WordPress’s wp_mail() function, so you can use a compatible SMTP plugin or email delivery service for improved deliverability. The number of emails you can successfully send depends on your hosting and configured mail provider, even though Noptin itself does not impose a subscriber-count limit.

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C